Hi guys

I'm trying to run a container with some vols on a GlusterFS volume:

-> $ { export _NAME="ko.xyz"; export _PATH=/00-APKI//${_NAME}; echo; mkdir -p ${_PATH}/{,root,media,files,apps,themes,images,settings,data,public}; }; podman run -dt --restart=always --volume ${_PATH}/config.production.json:/var/lib/ghost/config.production.json --volume ${_PATH}/root:/root:z

Error: lsetxattr /00-APKI/ko.xyz/media: operation not supported
..

GF vol is:

Volume Name: APKI
Type: Replicate
Volume ID: b90bc19a-9636-44f7-9b72-453ca9713b6a
Status: Started
Snapshot Count: 0
Number of Bricks: 1 x (2 + 1) = 3
Transport-type: tcp
Bricks:
Brick1: 10.1.1.100:/devs/00.GLUSTERs/APKI
Brick2: 10.1.1.101:/devs/00.GLUSTERs/APKI
Brick3: 10.1.1.99:/devs/00.GLUSTERs/APKI-arbiter (arbiter)
Options Reconfigured:
performance.client-io-threads: off
transport.address-family: inet
storage.fips-mode-rchecksum: on
cluster.granular-entry-heal: on
storage.owner-uid: 2002
storage.owner-gid: 2002
cluster.shd-max-threads: 3
features.cache-invalidation-timeout: 900
performance.cache-invalidation: on
performance.nl-cache: on
performance.nl-cache-timeout: 600
performance.parallel-readdir: on
performance.readdir-ahead: on
performance.stat-prefetch: on
cluster.self-heal-daemon: enable

_autofs_ makes the moutpoing with:

/00-APKI -fstype=glusterfs,capability,kernel-writeback-cache=1,acl,log-file=/var/log/glusterfs/mount.APKI.log 10.1.1.100,10.1.1.99,10.1.1.101:/APKI

I fiddled with both autofs & gluster but cannot figure it out - would somebody know what's wrong/missing here?
I suspect it's due to SE labeling - which would be great to have, naturally.

many thanks, L.

_______________________________________________
Podman mailing list -- podman@lists.podman.io
To unsubscribe send an email to podman-leave@lists.podman.io

Remove :z option, since this is not supported on GlusterFS, not sure if SELinux will allow this or not, might have to disable SELinux separation for now.  Collect the AVC messages and I will take a look.